Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/1b7635-e6ff-4969-b2c0-89fb8fe69633/1/8JA6jWnovH3aSLNxaIlIv_K2_yM.roa
File: 8JA6jWnovH3aSLNxaIlIv_K2_yM.roa (raw, json)
Hash identifier: OJbwkitLKJrFT0e+pWiIArtH3q7Y1sNvZXhXYuGhKso=
Subject key identifier: F0:90:3A:8D:69:E8:BC:7D:DA:48:B3:71:68:89:48:BF:F2:B6:FF:23
Certificate issuer: /CN=9ba90d66d2ddeb646a61406912ffddfa14e39910
Certificate serial: 018ECD9487B624E2FE2FFA2FFB01359A66FD
Authority key identifier: 9B:A9:0D:66:D2:DD:EB:64:6A:61:40:69:12:FF:DD:FA:14:E3:99:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m6kNZtLd62RqYUBpEv_d-hTjmRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/1b7635-e6ff-4969-b2c0-89fb8fe69633/1/8JA6jWnovH3aSLNxaIlIv_K2_yM.roa
Signing time: Thu 11 Apr 2024 14:34:07 +0000
ROA not before: Thu 11 Apr 2024 14:34:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197540
IP address blocks: 5.182.200.0/23 maxlen: 23
5.182.202.0/23 maxlen: 23
2a0f:5b00::/32 maxlen: 32
2a0f:5b01::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/1b7635-e6ff-4969-b2c0-89fb8fe69633/1/m6kNZtLd62RqYUBpEv_d-hTjmRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/1b7635-e6ff-4969-b2c0-89fb8fe69633/1/m6kNZtLd62RqYUBpEv_d-hTjmRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/m6kNZtLd62RqYUBpEv_d-hTjmRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 21:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:cd:94:87:b6:24:e2:fe:2f:fa:2f:fb:01:35:9a:66:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ba90d66d2ddeb646a61406912ffddfa14e39910
Validity
Not Before: Apr 11 14:34:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f0903a8d69e8bc7dda48b371688948bff2b6ff23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:dc:92:ac:73:e7:00:cf:10:74:71:1f:d5:8d:
71:25:c5:61:e1:89:4f:0e:3c:70:b8:b0:95:34:11:
45:74:24:f2:88:19:3d:b3:bc:be:5c:02:c2:07:3f:
05:9f:96:99:9d:2a:20:8d:f9:db:f6:05:b6:67:9e:
a0:a2:9d:cb:de:38:3b:cd:de:f9:99:43:63:ec:0f:
6b:3c:6c:19:51:6c:bf:ff:6b:f1:a9:85:c3:92:68:
b1:97:c5:c3:4b:91:6b:b5:e7:60:9d:54:77:10:65:
f6:07:64:ed:80:70:46:9e:0a:ba:18:e1:eb:99:d5:
17:77:c4:8c:00:50:7a:53:b3:c0:d2:e2:92:32:76:
77:35:a4:71:db:2c:06:dc:c9:56:bb:c6:c0:be:00:
aa:6f:ad:77:8c:17:ad:3b:77:8a:a9:85:8f:cb:7e:
3a:07:eb:f7:31:1e:1d:65:87:54:5d:ac:19:34:ed:
cb:b0:3a:51:3a:4a:0f:07:71:a2:84:5b:0d:e6:fc:
ee:15:e1:11:a1:46:f7:d1:1f:cc:9f:53:19:3f:32:
21:70:ac:25:17:e5:7d:31:b3:06:34:f1:8f:e5:a4:
90:26:23:bb:e7:c6:ed:3c:07:7b:2a:c5:e7:af:67:
97:a8:86:87:e3:88:79:ce:46:9f:71:11:65:44:f0:
a3:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:90:3A:8D:69:E8:BC:7D:DA:48:B3:71:68:89:48:BF:F2:B6:FF:23
X509v3 Authority Key Identifier:
keyid:9B:A9:0D:66:D2:DD:EB:64:6A:61:40:69:12:FF:DD:FA:14:E3:99:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m6kNZtLd62RqYUBpEv_d-hTjmRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1b7635-e6ff-4969-b2c0-89fb8fe69633/1/8JA6jWnovH3aSLNxaIlIv_K2_yM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1b7635-e6ff-4969-b2c0-89fb8fe69633/1/m6kNZtLd62RqYUBpEv_d-hTjmRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.200.0/22
IPv6:
2a0f:5b00::/31
Signature Algorithm: sha256WithRSAEncryption
05:f5:e4:35:a4:0d:45:93:c9:5e:08:c1:eb:42:7c:2a:98:22:
74:8b:85:c8:6c:a3:7b:2f:fa:4a:4f:b7:aa:60:66:51:78:54:
18:df:78:21:35:4c:2a:e4:f3:a5:59:2a:90:bb:76:09:cf:47:
f8:e9:f8:f3:93:55:e0:4b:c4:71:34:ca:b6:fc:99:79:66:f8:
8b:2a:2f:95:d4:a2:c1:15:fc:24:47:0e:cd:53:27:8d:b7:8a:
f4:b4:de:aa:00:3f:7c:1a:a7:4f:28:f6:ac:58:bc:8c:4a:89:
a2:b1:4d:af:86:5e:87:10:f5:1f:1a:fd:38:fd:0c:25:22:40:
03:7d:31:98:fa:7b:cf:d0:cd:6e:30:75:11:07:18:87:5c:64:
4b:17:2e:5e:44:c8:54:bd:ca:8f:d8:8c:df:2f:10:ea:04:b0:
7c:e8:45:b5:1f:fe:ee:d0:b4:50:b6:88:aa:24:d0:53:e4:d4:
9e:13:2c:a3:33:c9:40:a7:ab:3d:b1:7b:6a:fb:60:2b:5e:bc:
33:99:28:24:0e:ad:62:61:f3:bb:be:20:b6:8b:66:65:b2:52:
ad:05:d1:2c:21:04:8a:c3:b6:80:bc:7b:5c:8d:d8:75:d3:a4:
03:af:27:99:b6:9e:b1:59:6b:a5:14:14:ca:ae:f3:c2:f9:86:
5e:c1:9a:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:07:11 2024 by rpki-client on console-ams.rpki-client.org